PT-2025-16208 · Unknown · Scriptandtools Ecommerce-Website-In-Php

Maloyroyorko · Published 2025-04-14 · Updated 2025-07-17 · CVE-2025-3555

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ScriptAndTools eCommerce-website-in-PHP version 3.0

Description A problematic issue has been identified in the software. The issue involves improper restriction of excessive authentication attempts, potentially allowing remote attacks. The complexity of exploiting this issue is considered high, and exploitability is difficult. The exploit has been publicly disclosed, and the vendor was notified but did not respond. The vulnerability affects an unknown function within the /login.php file.

Recommendations ScriptAndTools eCommerce-website-in-PHP version 3.0: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

CWE-799

Related Identifiers

CVE-2025-3555

Affected Products

Scriptandtools Ecommerce-Website-In-Php

References · 12

• 🔥 https://github.com/Maloyroyorko/E-commerce-3.0-user-bruter · Exploit
• 🔥 https://websecurityinsights.my.id/2025/04/script-and-tools-ecommerce-30-loginphp.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-3555 · Security Note
• https://osv.dev/vulnerability/CVE-2025-3555 · Vendor Advisory
• https://t.me/cvedetector/22827 · Telegram Post
• https://t.me/cvetracker/21506 · Telegram Post
• https://vuldb.com/?submit.549168 · Note
• https://t.me/cvenotify/129343 · Telegram Post
• https://twitter.com/WolfgangSesin/status/1911602040322531696 · Twitter Post
• https://twitter.com/CVEnew/status/1911683928357822530 · Twitter Post
• https://vuldb.com/?id.304596 · Note
• https://vuldb.com/?ctiid.304596 · Note